I don't think the logic implemented by RtlIsDosDeviceName_U() is all that
different from the logic in the patch. Which is to say, it seems to use a
hard-coded list of names and does not actually check for existing devices. Do
we want to block all names that could be DOS devices or just the names of
devices that exist?
This is interesting:
http://msdn.microsoft.com/library/en-us/fileio/base/querydosdevice.asp
So is this:
-----
C:\>ver
Windows 98 [Version 4.10.2222]
C:\>type config$
Invalid device request reading device CONFIG$
Abort, Retry, Ignore, Fail?f
Fail on INT 24 - config$
-----
Cheers